Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217391	6.1	警告	シーメンス	-	Siemens SIMATIC S7-1500 CPU PLC デバイスのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-2253	2014-03-18 16:46	2014-03-12	Show	GitHub Exploit DB Packet Storm

217392	8.3	危険	シーメンス	-	Siemens SIMATIC S7-1500 CPU PLC デバイスの乱数生成における暗号保護メカニズムを破られる脆弱性	CWE-Other その他	CVE-2014-2251	2014-03-18 16:46	2014-03-12	Show	GitHub Exploit DB Packet Storm

217393	4.3	警告	シーメンス	-	Siemens SIMATIC S7-1500 CPU PLC デバイスの統合 Web サーバにおけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2014-2248	2014-03-18 16:45	2014-03-12	Show	GitHub Exploit DB Packet Storm

217394	4.3	警告	シーメンス	-	Siemens SIMATIC S7-1500 CPU PLC デバイスの統合 Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2246	2014-03-18 16:44	2014-03-12	Show	GitHub Exploit DB Packet Storm

217395	7.2	危険	ジュニパーネットワークス	-	IVE OS の Juniper Junos Pulse Secure Access Service の Linux Network Connect クライアントにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2014-2292	2014-03-18 16:35	2014-03-12	Show	GitHub Exploit DB Packet Storm

217396	3.5	注意	ジュニパーネットワークス	-	IVE OS の Juniper Junos Pulse Secure Access Service におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2291	2014-03-18 16:35	2014-03-12	Show	GitHub Exploit DB Packet Storm

217397	7.5	危険	Google	-	複数の OS 上で稼働する Google Chrome におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-1715	2014-03-18 15:30	2014-03-14	Show	GitHub Exploit DB Packet Storm

217398	7.5	危険	Google	-	複数の OS 上で稼働する Google Chrome の ui/base/clipboard/scoped_clipboard_writer.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-1714	2014-03-18 15:30	2014-03-14	Show	GitHub Exploit DB Packet Storm

217399	7.5	危険	Google	-	Google Chrome OS のカーネルの GPU ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-1711	2014-03-18 15:30	2014-03-14	Show	GitHub Exploit DB Packet Storm

217400	7.5	危険	Google	-	Google Chrome OS で使用される Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-1710	2014-03-18 15:30	2014-03-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293611	-	socialcms	socialcms	Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts vi…	CWE-352 Origin Validation Error	CVE-2012-1416	2024-11-21 10:36	2012-10-9	Show	GitHub Exploit DB Packet Storm

293612	-	dlink	dsl-2640b_firmware dsl-2640b	Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the…	CWE-352 Origin Validation Error	CVE-2012-1308	2024-11-21 10:36	2012-10-9	Show	GitHub Exploit DB Packet Storm

293613	-	bernhard_wymann speed-dreams	torcs speed_dreams	Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary co…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-1189	2024-11-21 10:36	2012-10-9	Show	GitHub Exploit DB Packet Storm

293614	-	kishore_asokan	kish_guest_posting_plugin	Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a fi…	NVD-CWE-Other	CVE-2012-1125	2024-11-21 10:36	2012-10-9	Show	GitHub Exploit DB Packet Storm

293615	-	plume-cms	plume_cms	Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News…	CWE-352 Origin Validation Error	CVE-2012-1414	2024-11-21 10:36	2012-10-8	Show	GitHub Exploit DB Packet Storm

293616	-	apprain	apprain	Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable exte…	NVD-CWE-Other	CVE-2012-1153	2024-11-21 10:36	2012-10-7	Show	GitHub Exploit DB Packet Storm

293617	-	impresscms	impresscms	Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files vi…	CWE-22 Path Traversal	CVE-2012-0987	2024-11-21 10:36	2012-10-7	Show	GitHub Exploit DB Packet Storm

293618	-	impresscms	impresscms	Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO…	CWE-79 Cross-site Scripting	CVE-2012-0986	2024-11-21 10:36	2012-10-7	Show	GitHub Exploit DB Packet Storm

293619	-	python	python	Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dep…	CWE-310 Cryptographic Issues	CVE-2012-1150	2024-11-21 10:36	2012-10-6	Show	GitHub Exploit DB Packet Storm

293620	-	oneorzero	action_and_information_management_system	Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to ind…	CWE-79 Cross-site Scripting	CVE-2012-0989	2024-11-21 10:36	2012-10-2	Show	GitHub Exploit DB Packet Storm